Engineering Manager - Grafana Application Security

Details

Grafana Labs is looking for an Engineering Manager to lead its application security engineering team. The role covers application security, cloud security, vulnerability management, internal tooling development, incident response, and collaboration with engineering and security leadership across the organization.

The successful candidate will have a proven track record of improving the maturity of security programs through automation and systematic approaches in cloud-based SaaS organizations. They should be able to review threat models, challenge severity ratings, contribute to design reviews, and prioritize risk mitigation.

Responsibilities

• Lead the application security team across application security, cloud security, and internal tooling development.
• Lead first- and third-party vulnerability management, including coordinated disclosure with external reporters and embargoed fixes.
• Define, optimize, and implement the engineering strategy in collaboration with security leadership, individual contributors, and stakeholders across the business.
• Conduct regular 1:1s, coaching, and mentoring to keep team members motivated, engaged, and effective.
• Provide continuous feedback while maintaining high standards.
• Collaborate with engineering leaders and organizational stakeholders to define and influence product strategy, roadmaps, and designs.
• Participate in significant incidents, including preparation, simulation, response, and affected-customer notification and communications.
• Contribute to and review design documents for upcoming projects.
• Ensure projects are well-defined and ready for development, and advise on breaking projects down into tasks.

Requirements

• Prior experience running a security engineering team.
• Strong engineering background and the ability to engage in technical conversations and challenge teams to reach strong technical decisions.
• Comfort working with highly autonomous engineering teams in both technical and product-focused decision-making.
• Ability to maintain current knowledge of technical trends and the challenges faced by security engineering teams.
• A DevOps-oriented approach to security, favoring enablement, automation, and guardrails over gates and roadblocks.
• Familiarity with securing and operating on public cloud providers, including AWS, GCP, and Azure.
• Familiarity with Kubernetes and securing combined open-source software and SaaS products.
• Excellent written and verbal communication skills, including the ability to explain complex cybersecurity concepts to technical and non-technical audiences and translate security problems into business impact.

Bonus Points

• Technical background, ideally including programming or software engineering experience before transitioning into security and leadership.
• Working knowledge of Grafana Labs open-source projects and products.
• Experience using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience securing large-scale distributed systems.

Compensation and Benefits

• Spain base compensation range: €94,025–€112,830 per year.
• Restricted Stock Units (RSUs) are included in all roles.
• 100% remote global culture.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including 3 Grafana Shutdown Days.
• Career growth pathways and an innovation-driven environment.

The role is remote, with candidates considered in the UK, Spain, and Ireland.